Privacy Policy
Last updated: March 30, 2026
This Privacy Policy describes how StoryCrush ("we", "us", "our") collects, uses, and protects your information when you use our Service.
1. Information We Collect
a) Account Information
When you sign in with Google, we receive your name, email address, and profile picture from Google. We store a user record linked to your Google account.
b) Profile Information
During onboarding, we ask for a display name (persona name) that characters will use to address you. This is stored in your user profile.
c) Age Verification
If you choose to disable the safety filter for 18+ content, we collect your date of birth to verify you are at least 18 years old. We store only whether age verification was completed and the verified date — not your full date of birth.
d) Chat & Content Data
We store your conversations with AI characters, characters you create, stories, and related content. This data is necessary to provide the Service (e.g., maintaining conversation history, story progress, and relationship state).
e) Usage Data
We collect basic usage information such as pages visited, features used, and message counts for rate limiting and service improvement.
2. How We Use Your Information
- To provide and maintain the Service
- To authenticate your identity
- To enforce age restrictions on mature content
- To process subscriptions and payments (via Polar)
- To generate AI responses tailored to your conversations
- To improve the Service and fix issues
- To communicate with you about your account or the Service
3. Third-Party Services
We share limited data with the following third-party services:
| Service | Purpose | Data Shared |
|---|---|---|
| Google (OAuth) | Authentication | Login flow only; we receive name, email, avatar |
| Polar | Payment processing (MoR) | Email, user ID for subscription management |
| OpenRouter / LLM Providers | AI text generation | Conversation context (messages sent to AI) |
| Supabase | Database & file storage | All Service data (hosted infrastructure) |
| Vercel | Hosting & deployment | Standard web server logs |
Each third-party service operates under its own privacy policy. We do not sell your personal data to any third party.
4. AI Conversations & Data Processing
Your messages are sent to third-party AI model providers (via OpenRouter) to generate responses. These providers may process your messages according to their own data policies. We recommend not sharing sensitive personal information (e.g., real addresses, financial details) in conversations.
5. Cookies & Local Storage
We use essential cookies for authentication (session tokens) and user preferences (theme, safety filter state). We do not use third-party advertising or tracking cookies.
6. Data Retention
We retain your data for as long as your account is active. Conversation data is stored to maintain your chat history and story progress. You may delete individual conversations or your entire account. When you delete your account, we will remove your personal data within 30 days, except where retention is required by law.
7. Data Security
We use industry-standard measures to protect your data, including encrypted connections (HTTPS), secure authentication, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict certain processing
- Export your data in a portable format
To exercise these rights, contact us through the in-app feedback feature. We will respond within 30 days.
9. Children's Privacy
The Service is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, please contact us and we will promptly delete the account.
10. International Data Transfers
Your data may be processed in countries other than your own (including the United States) where our service providers operate. By using the Service, you consent to such transfers.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated "Last updated" date. Material changes will be communicated through the Service.
12. Contact
If you have questions about this Privacy Policy or your data, please reach out through the in-app feedback feature or contact us at the email provided on our website.
See also: Terms of Service